Azure AZ-104 Complete Guide 2026: Pass Administrator Exam First Try

What is Azure AZ-104?

The Microsoft Azure Administrator (AZ-104) certification validates your skills in implementing, managing, and monitoring Azure environments. It's one of Microsoft's most popular certifications for IT professionals working with Azure infrastructure. For official exam details, visit the official Microsoft Learn page.

AZ-104 is designed for Azure Administrators who configure and manage cloud resources. This associate-level exam expects hands-on experience with Azure services, including compute, storage, networking, and security.

Exam Format & Details

Question Types

The AZ-104 exam includes several question formats:

• Multiple Choice: Select ONE correct answer
• Multiple Response: Select ALL that apply
• Drag and Drop: Match items or arrange in sequence
• Hot Area: Click on the correct part of an image/diagram
• Case Studies: Scenario-based questions with multiple parts

All 5 Exam Domains Explained

The AZ-104 exam covers five main domains. Understanding the weight of each helps you prioritize your study time.

Key Topics & Services to Master

AZ Active Directory (Entra ID)

• User Management: Create, manage, and delete users
• Group Types: Security groups vs. Microsoft 365 groups
• Guest Users: B2B collaboration scenarios
• Self-Service Password Reset (SSPR): Configuration and policies
• AZ AD Join: Device management options

Role-Based Access Control (RBAC)

• Built-in Roles: Owner, Contributor, Reader, User Access Administrator
• Custom Roles: When and how to create them
• Scope Levels: Management group, subscription, resource group, resource
• Role Inheritance: How permissions flow down the hierarchy

Virtual Machines

• VM Sizes: General purpose, compute optimized, memory optimized
• Availability: Availability sets vs. availability zones
• Disks: Managed disks, disk types (Standard HDD, Standard SSD, Premium SSD)
• Extensions: Custom Script Extension, AZ Monitor Agent
• Scale Sets: Auto-scaling rules and health probes

Networking Essentials

• VNet Design: Address spaces, subnets, and IP addressing
• NSG Rules: Priority, inbound/outbound, default rules
• VNet Peering: Regional and global peering
• Load Balancing: Basic vs. Standard, internal vs. public
• VPN Gateway: Site-to-site and point-to-site connections

Essential Hands-On Labs

AZ-104 tests practical skills. Complete these labs to build confidence:

Week 1-2: Identity & Governance

• Create users and groups in AZ AD
• Assign RBAC roles at different scopes
• Create and assign AZ Policy definitions
• Set up management groups hierarchy
• Configure resource locks and tags

Week 3-4: Compute & Storage

• Deploy VMs in availability sets and zones
• Configure VM scale sets with auto-scaling
• Create storage accounts with different replication options
• Configure blob lifecycle policies
• Set up AZ Files and File Sync
• Deploy a web app to AZ App Service

Week 5-6: Networking & Monitoring

• Create VNets with multiple subnets
• Configure NSG rules and ASGs
• Set up VNet peering (same and different regions)
• Deploy AZ Load Balancer
• Configure AZ Monitor and Log Analytics
• Create alerts and action groups

6-Week Study Plan

Week 1: Identity & Governance Foundations

• Complete Microsoft Learn modules on AZ AD
• Study RBAC and AZ Policy
• Hands-on: Create users, groups, and role assignments
• Practice questions: 50-75 on identity topics

Week 2: Storage Deep Dive

• Study all storage account types and replication options
• Learn blob access tiers and lifecycle management
• Hands-on: Create storage accounts, configure access
• Practice questions: 50-75 on storage topics

Week 3: Virtual Machines

• Study VM sizing, availability, and scaling options
• Learn about managed disks and extensions
• Hands-on: Deploy VMs, scale sets, configure availability
• Practice questions: 50-75 on compute topics

Week 4: Networking Fundamentals

• Study VNets, subnets, and IP addressing
• Learn NSGs, peering, and load balancing
• Hands-on: Build a multi-tier network architecture
• Practice questions: 50-75 on networking topics

Week 5: Advanced Topics & Monitoring

• Study App Service, containers, and AKS basics
• Learn AZ Monitor, Log Analytics, and alerting
• Hands-on: Deploy web apps, configure monitoring
• Practice questions: 75-100 mixed topics

Week 6: Review & Practice Exams

• Take full-length practice exams
• Review weak areas identified in practice
• Re-do hands-on labs for difficult topics
• Target score: 85%+ on practice exams before your certification exam

Exam Day Tips

• Time Management: You have about 2 minutes per question on average
• Case Studies First: If you see case studies, read the scenario carefully
• Lab Questions: If present, manage your time - they take longer
• Flag and Review: Mark uncertain questions for later review
• Read Carefully: Watch for "NOT," "EXCEPT," "MINIMUM," "MAXIMUM"
• Eliminate Wrong Answers: Narrow down choices systematically

Frequently Asked Questions

How hard is AZ-104 compared to AZ-900?

AZ-104 is significantly more difficult. AZ-900 tests conceptual knowledge, while AZ-104 requires hands-on expertise. Expect to study 4-8 weeks vs. 1-3 weeks for AZ-900.

Do I need to take AZ-900 first?

No, AZ-900 is not a prerequisite. However, if you're new to AZ, AZ-900 provides foundational knowledge that makes AZ-104 easier to learn.

Are there labs on the AZ-104 exam?

Yes, AZ-104 may include performance-based lab questions. You'll interact with an actual AZ environment to complete tasks. Not all exam forms include labs.

How long is the AZ-104 certification valid?

Microsoft role-based certifications (like AZ-104) are valid for one year. You must complete a free renewal assessment on Microsoft Learn before expiration.

What jobs can I get with AZ-104?

AZ-104 qualifies you for roles like AZ Administrator, Cloud Administrator, Cloud Engineer, and Systems Administrator. It's also valuable for DevOps and Site Reliability Engineer positions.

ExamCert Team

Cloud-certified professionals helping you pass your certification exams.